Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144094.roa
File:                     AS144094.roa (raw, json)
Hash identifier:          BlCSfgDdFU0BAox6MvmXFfgT+l16V8+cO8zhPrTjNYE=
Subject key identifier:   C2:29:F0:54:0A:5A:2C:F6:EB:A6:1C:51:2F:82:A9:FA:07:CB:CB:EC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       205EB4EE181D4AC6D67942ECD66CFD10D64D53E9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144094.roa
Signing time:             Fri 22 May 2026 07:24:55 +0000
ROA not before:           Fri 22 May 2026 07:19:55 +0000
ROA not after:            Fri 21 May 2027 07:24:55 +0000
asID:                     144094
IP address blocks:        240a:a5a4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5e:b4:ee:18:1d:4a:c6:d6:79:42:ec:d6:6c:fd:10:d6:4d:53:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:55 2026 GMT
            Not After : May 21 07:24:55 2027 GMT
        Subject: CN=C229F0540A5A2CF6EBA61C512F82A9FA07CBCBEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:20:4a:90:f6:e4:c8:8c:ff:71:86:40:52:
                    b8:ef:c9:5b:7c:4b:43:9e:6b:77:56:00:b3:ae:ca:
                    bb:33:a2:e2:20:b2:8c:b9:c0:84:7d:44:35:59:37:
                    6e:24:0b:93:57:8e:73:1d:8d:ad:31:fc:04:3f:22:
                    07:b2:18:d5:d9:7d:f0:ba:53:bd:9a:e5:20:c1:8b:
                    c8:c1:b7:b2:d4:6c:96:f2:23:26:40:98:50:9e:1d:
                    ac:73:7a:e7:61:52:a6:4a:34:18:4d:d7:80:ee:b6:
                    92:3c:d0:2c:aa:f4:e6:b8:1e:5b:05:1e:66:57:9b:
                    c7:a5:9b:07:c4:1f:b0:ce:e7:e4:74:19:a3:b3:9c:
                    31:36:5d:8a:29:47:3d:39:9b:de:f0:e0:c1:25:4d:
                    b8:6d:d5:ac:cd:13:9c:fd:56:22:91:f5:da:7e:bc:
                    11:76:3b:c0:ae:73:62:11:b0:a8:76:18:32:08:a7:
                    2c:86:34:fc:70:b2:8c:ce:85:e7:59:b8:38:38:30:
                    88:bf:c8:8f:b0:6d:63:d6:7f:27:84:48:eb:05:b3:
                    0e:35:a5:6a:e5:f4:44:e2:d5:75:55:b3:e2:42:e4:
                    fb:3f:da:4a:a2:1f:c4:fc:90:68:e6:92:25:f8:42:
                    04:fd:5a:62:99:9b:fb:ff:c4:39:2c:9e:ec:f0:a4:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:29:F0:54:0A:5A:2C:F6:EB:A6:1C:51:2F:82:A9:FA:07:CB:CB:EC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144094.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:5c:51:09:8a:8a:ed:d4:13:a1:07:f3:a5:12:31:91:1d:9b:
         b0:f6:78:5b:55:22:12:31:79:cc:37:cd:1a:0d:df:74:6c:c1:
         cd:6f:f0:8a:50:9e:e6:99:73:f5:18:8d:96:d3:a6:e1:84:e1:
         68:e5:98:d2:3d:10:03:0e:70:1c:62:d1:d2:a2:21:5d:10:de:
         69:d9:11:de:1b:63:41:b5:43:a3:ce:ab:b2:12:00:7f:08:9a:
         e5:2d:33:95:f8:74:fd:32:4b:49:0d:07:b3:db:e0:16:61:c1:
         c8:85:e0:53:55:76:5f:b4:88:d3:40:44:f7:9b:13:ff:a5:c0:
         96:4e:93:08:19:3a:f7:eb:25:c1:10:27:09:38:93:0a:c7:a2:
         95:ef:e8:1d:df:12:4f:65:55:a7:f6:00:01:1f:40:17:79:b1:
         01:b7:a4:a8:6d:9d:21:5e:a3:ba:8b:2e:67:a7:03:7e:09:97:
         a7:cd:36:08:e7:d5:36:25:2f:29:c7:f2:bf:31:87:31:9b:22:
         b7:08:d7:f8:e3:fb:3f:e7:59:6d:74:37:9d:38:10:5b:5f:d0:
         3e:da:4d:fa:92:19:5b:3b:4f:9f:34:04:cc:7c:6e:36:a2:69:
         13:47:5c:be:9a:1b:f7:42:71:fa:a3:4e:d3:01:4f:01:08:17:
         82:78:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----